Intrusion detection via decision tree and protocol analysis
Guishi Deng · Jisuanji yingyong yanjiu · 2007
Most of intrusion detection systems use simple pattern matching technology based on rules,however,they have the problem of low efficiency and high alarm rate positive.In order to improve efficiency and decrease positive alarm rate,presented a new method of using decision tree.It realized intrusion detection system based on protocol analysis.The experiment results show that it has high performance and low false positive.